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Amendments to the claims : 

This listing of claims will replace all prior versions, and listings, of claims in the application; 
Listing of claims: 

Claim 1 (currently amended): An authorization method for storing and retrieving data, applied 
to an authorization system for connecting a terminal device to a resource system established by 
an application service provider (ASP) via a network, so as to allow the ASP to authorize a user at 
the terminal device to interact therewith for data storage and retrieval, wherein the authorization 
system is preconstructed with a database and an authorization account, while the database 
includes a plurality of user's data for identifying the user submitting a request for loginning 
logging into t he resource system, and the authorization account is used for authorizing the user to 
store and retrieve the resource system; the authorization method comprising the steps of: 

(1) receiving user's data inputted by the user to the terminal device via the authorization 

system; 

(2) comparing the user's data transmitted from the terminal device with the user's data 
stored in the database via the authorization system, wherein if no user's data in the database 
matches the user's data transmitted from the terminal device, then step (3) is followed; if one of 
the user's data in the database matches the user's data transmitted from the terminal device, then 
step (4) is followed; 

(3) sending a message of failure in loginning -lofiging into t he resource system via the 
authorization system to the terminal device, and allowing the user at the terminal device to re- 
input user's data for logimiing -loggmg into the resource system; then returning to the step (1); 
and 

(4) sending an authorization account via the authorization system to the resource system, 
and transmitting data generated by the resource system to the terminal device, so as to allow the 
user at the terminal device to interact with the resource system for data storage and retrieval. 
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Claim 2 (original): The authorization method of claim 1, wherein the user's data include a 
dedicated user's name and a password corresponding to the user's name. 

Claim 3 (original): The authorization method of claim I , wherein the resource system is an 
enterprise resource planning (ERP) system. 

Claim 4 (canceled) 

Claim 5 (original): The authorization method of claim 1, wherein the authorization system is 
established in a server host. 

Claim 6 (original): The authorization method of claim 5, wherein the authorization system is 
middleware, 

Claim 7 (original): The authorization method of claim 1, wherein the authorization system and 
the resource system are contained in world wide web (WWW). 

Claim 8 (currently amended): An authorization system for storing and retrieving data, for 
connecting a terminal device to a resource system established by an application service provider 
(ASP) via a network, so as to allow a user at the terminal device to store and retrieve application 
software provided by the ASP; the authorization system comprising: 

a database for establishing user's data for storing and retrieving the resource system; 

a receiving module for receiving user's data for Ioginninp logging into t he resource 
system inputted by the user at the terminal device; 

an identi Tying module for comparing the user's data transmitted from the receiving 
module with the user's data stored in the database; 

a replying module for responding according to compared results from the identifying 
module, wherein if no user's data in the database matches the user's data inputted by the user, the 
replying module sends a message of failure in loginning logging into the resource system to the 
user at the terminal device, and allows the user to re-input user's data for loginning logging into 
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the resource system; if eft -one o f the user's data in the database matches the user's data inputted 
by the user, the replying module generates a message of permission for loemning logging into 
the resource system; 

a managing module having an authorization account for loginnmg l ogging into t he 
resource system, wherein the managing module sends an authorization account to the resource 
system according to the permission message transmitted from the replying module, so as to allow 
the terminal device to interact with the resource system for data storage and retrieval after the 
authorization account is identified by the resource system; and 

a processing module for processing data generated by the interaction between the 
terminal device and the resource system, so as to display the data in the form of a web page on a 
browser of the terminal device. 

Claim 9 (original): The authorization system of claim S, wherein the web page is in the form of 
extensible markup language (XML), 

Claim 10 (original): The authorization system of claim 8, wherein the user's data include a 
dedicated user's name and a password corresponding to the user's name. 

Claim 1 1 (original); The authorization system of claim 8, wherein the resource system is an 
enterprise resource planning (ERP) system. 

Claim 12 (canceled) 

Claim 13 (original): The authorization system of claim 8, wherein the authorization system is 
established in a server host, 

Claim 14 (original): The authorization system of claim 13, wherein the authorization system is 
middleware. 
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Claim 15 (original): The authorization system of claim 8, wherein the authorization system and 
the resource system arc contained in world wide web (WWW). 
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